Believe it or not I'm having the same problem in our network with Cisco devices.
Check port 514
To do this (from another computer on the network) -> telnet 192.168.2.1 514
If you get through -> port 514 is allowed.
Next if you can physically get in reach of the server LEM is on or a device LEM is on send the logs directly from that device. Let me know your results.
Only use port 514 since LEM wont work on any other port number. I know your Cisco device will but LEM will not.
I work on a huge network where port 514 may be blocked at some locations. You may want to look at SNMP as an alternative.
*user curtisi statement is probably correct but doing what I wrote will help you troubleshoot why.
